Home / For schools & colleges / Student data & safety

What we hold, and on what terms.

Minimum collection, a signed processor agreement, and nothing sold or shared with advertisers. Here is the detail a data protection officer will ask for.

WHAT WE HOLD Name and school email Grade level and class Progress and scores Nothing else WHAT NEVER HAPPENS Sold to anyone Shared with advertisers Used to build profiles Kept after 90 days
The whole data position on one line each. The detail below is the same thing, in full.

Student data

Children's data, handled the way a school would.

Every report here is built from student data, so the terms on which we hold it matter. Under the school agreement the school stays the controller and we act only on its instructions, the same footing as any other system in your building.

We designed the platform against the IEEE age-appropriate design standards for children's services, and map our controls to the school-data rules of each country we operate in. The full policy and the standards mapping live on one page, written to forward to your data protection lead.

Read the student data policy Download the data processing agreement →
Minimum data. Name, school email, grade level, class, and the progress and scores the program generates. No home address, no photos, no device tracking.
No advertising, ever. Student data is never sold, shared with advertisers, or used to build profiles for any purpose other than teaching the program.
The school controls the leaderboard. Named, anonymized or off, per class or per school. Off by default for students under 13.
Parents can see and ask. A parent can view their child's record through the school and request correction or deletion; the school decides, we act within 30 days.
Deleted when you leave. Records are returned to the school and erased from our systems within 90 days of the agreement ending. Credentials the student earned stay with the student.
Your data stays in your region. Hosting region chosen per school agreement; no cross-border transfer without a lawful basis you have approved.
IEEE 2089™-2021
Age Appropriate Digital Services Framework
The 5Rights-based standard for designing services children use. We follow its process: recognize children are present, assess impact by age, and default to their best interests.
IEEE 2089.1™-2024
Online Age Verification
Our age assurance for direct sign-ups follows the standard's proportionate approach: verify only what the risk requires, and keep nothing you do not need.
COPPA · FERPA · GDPR · UK AADC
Mapped, country by country
School-authorised consent under COPPA, "school official" handling under FERPA, Article 8 and the UK Children's code in Europe. The mapping is published on the policy page.

Want the paperwork before the conversation?

The processor terms and the full privacy notice are both public. Nothing is behind a form. If your data protection lead would rather put questions to a person, the data contact joins the demo.

Data processing agreement Full privacy notice Book a demo